Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
File:                     kTOGkN66V4znOCGKniIIVNG1J18.mft (raw, json)
Hash identifier:          2h97qdsbwcXIka+3tfiYItdDSajPszJQAszyiMGlt4c=
Subject key identifier:   A7:D3:7F:F8:74:1D:9E:A4:D1:65:40:ED:EC:32:22:38:EA:F9:AD:D0
Authority key identifier: 91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F
Certificate issuer:       /CN=A91F605B/serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
Certificate serial:       051E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
Manifest number:          04FC
Signing time:             Tue 12 May 2026 23:56:08 +0000
Manifest this update:     Tue 12 May 2026 23:56:07 +0000
Manifest next update:     Tue 19 May 2026 23:56:07 +0000
Files and hashes:         1: kTOGkN66V4znOCGKniIIVNG1J18.crl (hash: A4bU769S4qbBLTF8Kx2tqWpnxYWme/Iz213pKOkaVPc=)
                          2: 693FD0A8127911F18FB8754C353D8C67.roa (hash: 2vsh9mlCd8KP8ShN9kNL1OPBZD5VxMSn/p2bSQnyh44=)
                          3: CF78AD96127811F183C0012F353D8C67.roa (hash: yTs4slfJUp8xAoMRVrm1EmE1KgWXBTMHYKJoI1jT1pE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl
                          rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:56:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1310 (0x51e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F605B, serialNumber=91338690DEBA578CE738218A9E220854D1B5275F
        Validity
            Not Before: May 12 23:56:07 2026 GMT
            Not After : May 19 23:56:07 2026 GMT
        Subject: CN=6a03be18-87a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:09:e4:ca:04:00:08:b8:a2:f9:9e:3f:d7:a1:
                    a5:ec:d8:57:f6:b3:6a:2f:b7:bf:d5:69:7b:e8:1b:
                    51:fc:4c:b0:1b:1b:a2:5e:73:2c:1a:5c:cd:2d:76:
                    40:37:3f:57:9f:92:7d:4d:96:cf:ed:45:e0:1a:81:
                    ff:95:00:c2:9e:05:18:50:03:de:45:2f:55:16:06:
                    c5:ba:a9:ae:1d:7a:17:72:7b:1d:54:5c:25:8e:d8:
                    20:88:9e:6b:5f:e8:af:cd:71:2f:4f:da:de:7f:86:
                    23:c8:91:6b:f3:4e:7d:33:c4:55:79:17:e2:99:14:
                    80:50:69:71:c0:86:8a:5e:3b:4e:b9:74:a2:7d:77:
                    b9:0c:85:9c:4b:2a:6b:c9:7d:a6:ab:53:66:ac:47:
                    01:43:2b:e8:e9:6f:f6:7b:9d:c9:29:c0:af:c1:a8:
                    43:54:c4:18:e4:40:69:01:a1:a7:32:be:3f:52:12:
                    ac:1e:78:91:51:97:08:25:a1:26:2c:c6:1a:35:60:
                    83:e7:7e:76:47:65:73:ba:70:b4:3f:88:65:0f:a3:
                    a3:f8:91:af:29:13:80:aa:89:26:7d:91:3d:29:7b:
                    ef:90:06:14:4a:e0:f3:44:cd:57:e6:ca:fb:f0:08:
                    b9:83:6d:1f:38:3c:5a:ce:67:dc:00:41:b9:97:22:
                    bc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D3:7F:F8:74:1D:9E:A4:D1:65:40:ED:EC:32:22:38:EA:F9:AD:D0
            X509v3 Authority Key Identifier:
                keyid:91:33:86:90:DE:BA:57:8C:E7:38:21:8A:9E:22:08:54:D1:B5:27:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kTOGkN66V4znOCGKniIIVNG1J18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F605B/9817D27264CC11EC96D4A558C4F9AE02/kTOGkN66V4znOCGKniIIVNG1J18.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:0a:04:6c:63:9c:0d:a2:f8:0d:5a:ba:eb:78:43:58:88:11:
         1c:b5:6b:ba:79:95:c4:a5:c9:1c:2d:7f:bb:49:a1:08:7c:a9:
         16:54:65:a6:0d:04:a8:17:06:e6:12:ca:91:f5:66:dc:41:93:
         19:7b:a9:54:57:a0:bc:cf:55:8f:64:ee:03:97:3f:6e:29:be:
         f6:36:9e:0e:ab:42:fa:ad:57:85:3f:9a:5c:da:fa:80:58:ee:
         06:8f:55:e1:a3:1a:4d:98:7f:83:61:15:83:df:84:4b:a5:ff:
         56:2f:69:6f:c3:c6:3b:11:4c:65:7c:bd:5c:81:b9:e7:8f:2a:
         fe:38:12:7d:c2:67:5f:b1:5c:89:cb:68:d5:f2:e8:a3:8e:68:
         7d:d9:7a:33:33:5c:4d:44:d2:7b:cd:34:ed:fc:67:c8:79:45:
         a0:5c:97:e6:81:90:19:8e:4d:55:a0:1a:f7:6f:68:a8:43:fc:
         e9:e1:cb:49:f2:07:30:ce:b0:ab:16:6a:40:88:2d:07:87:79:
         d2:73:95:c4:60:4c:b0:98:ed:d5:47:21:1e:72:43:aa:9b:c5:
         bc:35:89:f7:9d:3f:e4:e1:85:b0:23:62:7b:22:97:4f:f0:d9:
         7a:11:9b:1f:94:20:47:ae:a0:58:ac:02:e5:03:1e:c4:9e:c8:
         44:fa:18:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:30:44 2026 by rpki-client